Ptr Modification, Dns Server On Host Network - Cisco ASA Series Configuration Manual

Firewall cli, asa services module, and the adaptive security virtual appliance
Hide thumbs Also See for ASA Series:
Table of Contents

Advertisement

Chapter 10
NAT Examples and Reference
Create a network object for the inside IPv6 network, and configure dynamic NAT with a PAT pool.
Step 4
hostname(config)# object network IPv6_INSIDE
hostname(config-network-object)# subnet 2001:DB8::/96
hostname(config-network-object)# nat (inside,outside) dynamic pat-pool IPv4_POOL

PTR Modification, DNS Server on Host Network

The following figure shows an FTP server and DNS server on the outside. The ASA has a static
translation for the outside server. In this case, when an inside user performs a reverse DNS lookup for
10.1.2.56, the ASA modifies the reverse DNS query with the real address, and the DNS server responds
with the server name, ftp.cisco.com.
Figure 10-22
Reverse DNS Query Modification
10.1.2.56
PTR Modification, DNS Server on Host Network
PTR Record
3
ftp.cisco.com
Reverse DNS Query
209.165.201.10
2
209.165.201.10
1
Reverse DNS Query
10.1.2.56?
ftp.cisco.com
209.165.201.10
Static Translation on Inside to:
10.1.2.56
DNS Server
4
Outside
ASA
Inside
User
10.1.2.27
Cisco ASA Series Firewall CLI Configuration Guide
DNS and NAT
10-27

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents